upstream/ipython Files · IPython/html/tests/notebook/inject_js.js

Reverse hscrollbar min-height hack on OS X...

Reverse hscrollbar min-height hack on OS X OS X has optional behavior to only draw scrollbars during scroll, which causes problems for CodeMirror's scrollbars. CodeMirror's solution is to set a minimum size for their scrollbars, which is always present. The trade is that the container overlays most of the last line, swallowing click events when there is scrolling to do, even when no scrollbar is visible. This reverses the trade, recovering the click events at the expense of never showing the horizontal scrollbar on OS X when this option is enabled.

MinRK - - Load All Authors

File last commit:

r18587:1e136a8b


                r20298:2907e856

Download file

             inject_js.js
        
                    23 lines
            
             | 650 B
            
                | application/javascript
            
             |
                JavascriptLexer
            
             / IPython / html / tests / notebook / inject_js.js
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      //

      // Test robustness about JS injection in different place

      //

      // This assume malicious document arrive to the frontend.

      //

      casper.notebook_test(function () {

          var messages = [];

          this.on('remote.alert', function (msg) {

              messages.push(msg);

          });

          this.evaluate(function () {

              var cell = IPython.notebook.get_cell(0);

              var json = cell.toJSON();

              json.execution_count = "<script> alert('hello from input prompts !')</script>";

              cell.fromJSON(json);

          });

          this.then(function () {

              this.test.assert(messages.length == 0, "Captured log message from script tag injection !");

          });

      });

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				//
				// Test robustness about JS injection in different place
				//
				// This assume malicious document arrive to the frontend.
				//

				casper.notebook_test(function () {
				var messages = [];
				this.on('remote.alert', function (msg) {
				messages.push(msg);
				});

				this.evaluate(function () {
				var cell = IPython.notebook.get_cell(0);
				var json = cell.toJSON();
				json.execution_count = "<script> alert('hello from input prompts !')</script>";
				cell.fromJSON(json);
				});

				this.then(function () {
				this.test.assert(messages.length == 0, "Captured log message from script tag injection !");
				});
				});